Infrastructure coordinated media access control address assignment

Patent metadata

Field	Value
Publication number	US-9749289-B2
Application number	US-201514792392-A
Country	US
Kind code	B2
Filing date	Jul 6, 2015
Priority date	Jul 6, 2015
Publication date	Aug 29, 2017
Grant date	Aug 29, 2017

Abstract

Described herein are systems, devices, techniques and products for managing the dynamic assignment of media access control (MAC) addresses to wireless network devices, such as by identifying a dynamically assigned MAC address before, after, or during a wireless association process and communicating the dynamically assigned MAC address to a wireless network device. Also disclosed are systems, devices, techniques and products for preventing a denial of service attack on a wireless access point's association table, such as by requiring devices that associate with a wireless access point to respond to a query from the wireless access point shortly after association.

First claim

What is claimed is:

1. A system comprising:
one or more processors; and
a non-transitory computer readable storage medium coupled to the one or more processors, wherein the non-transitory computer readable storage medium includes instructions that, when executed by the one or more processors, cause the one or more processors to perform operations including:
transmitting, by a wireless client device, a request for a media access control (MAC) address;
receiving a response to the request, wherein the response is related to a network device, and wherein the response includes a designated MAC address;
transmitting an association request, wherein the association request includes the designated MAC address; and
receiving an association response, wherein the association response is related to the network device, and wherein the association response includes an association identifier,
wherein receiving the association request at the network device causes the network device to update an association table with an entry for the wireless client device, and wherein the entry includes the designated MAC address.

2. The system of claim 1 , wherein the request includes a Class 1 management frame, an action frame, an authentication frame, or a probe request frame.

3. The system of claim 1 , wherein the response includes a Class 1 management frame, an action frame, an authentication frame, or a probe response frame.

4. The system of claim 1 , wherein receiving the request at the network device causes the network device to identify the designated MAC address.

5. The system of claim 1 , wherein the request for a MAC address includes an identifier corresponding to the network device.

6. The system of claim 1 , wherein receiving the association request at the network device causes the network device to confirm that the designated MAC address included in the association request is authorized for use by the wireless client device.

7. The system of claim 1 , wherein the operations further include:
receiving an indicator of an availability of designated MAC addresses.

8. The system of claim 7 , wherein receiving the indicator includes receiving a beacon frame or a probe response frame, and wherein the beacon frame or probe response frame includes the indicator.

9. The system of claim 8 , wherein a service set identifier (SSID) of the beacon frame or probe response frame includes the indicator.

10. The system of claim 8 , wherein a vendor specific element of the beacon frame or probe response frame includes the indicator.

11. The system of claim 1 , wherein the operations further include:
receiving an association query, wherein the association query includes the designated MAC address; and
transmitting a response to the association query.

12. The system of claim 1 , wherein the operations further include:
transmitting an authentication query, wherein receiving the authentication at the wireless client device causes the wireless client device to transmit a response to the authentication query;
monitoring for an authentication response to the authentication query for a predetermined time period;
determining that an authentication response is not received during the predetermined time period; and
updating the association table to remove the entry for the wireless client device.

13. The system of claim 12 , wherein receiving the response to the authentication query at the network device causes the network device to update an association table with an entry for the wireless client device, and wherein the entry includes the designated MAC address.

14. The system of claim 12 , wherein the authentication query and the response to the authentication query include elements of wireless authentication process.

15. The system of claim 1 , wherein the network device is a wireless access point compliant.

16. The system of claim 1 , wherein the network device is a network controller.

17. A computer implemented method, comprising:
transmitting, by a wireless client device, a request for a media access control (MAC) address;
receiving a response to the request, wherein the response is related to a network device, and wherein the response includes a designated MAC address;
transmitting an association request, wherein the association request includes the designated MAC address; and
receiving an association response, wherein the association response is related to the network device, and wherein the association response includes an association identifier,
wherein receiving the association request causes the network device to update an association table with an entry for the wireless client device, and wherein the entry includes the designated MAC address.

18. The method of claim 17 , wherein the request includes a Class 1 management frame, an action frame, an authentication frame, or a probe request frame.

19. A non-transitory computer readable medium comprising instructions that, when executed by one or more processors, cause the one or more processors to perform operations including:
transmitting, by a wireless client device, a request for a media access control (MAC) address;
receiving a response to the request, wherein the response is related to a network device, and wherein the response includes a designated MAC address;
transmitting an association request, wherein the association request includes the designated MAC address; and
receiving an association response, wherein the association response is related to the network device, and wherein the association response includes an association identifier,
wherein receiving the association request causes the network device to update an association table with an entry for the wireless client device, and wherein the entry includes the designated MAC address.

Assignees

• Aruba Networks Inc

Inventors

• Raman Gopalakrishna
• Ganu Sachin
• Harkins Daniel
• Siraj Mohd

Classifications

• H04W12/06

  Authentication · CPC title

• H04L63/101

  Access control lists [ACL] · CPC title

• H04W12/12

  Detection or prevention of fraud · CPC title

• H04W84/12

  WLAN [Wireless Local Area Networks] · CPC title

• H04W12/08

  Access security · CPC title